{"action":"Upgrade org.xerial.snappy:snappy-java to 1.1.10.1 or later.","affected":[{"fixed":"1.1.10.1","introduced":"0"}],"component":"org.xerial.snappy:snappy-java","cve_ids":["CVE-2023-34455"],"ecosystem":"Maven","epss":0.01762,"exploited":false,"fixed_versions":["1.1.10.1"],"ghsa_id":"GHSA-qcwq-55hx-v3vh","id":"tcs_01M5N99B6H16N0R7XV6HJMAX1F","modified_at":"2026-09-10T03:50:08.419674842Z","published_at":"2023-06-15T17:15:06Z","references":["https://osv.dev/vulnerability/GHSA-qcwq-55hx-v3vh","https://github.com/xerial/snappy-java/security/advisories/GHSA-qcwq-55hx-v3vh","https://nvd.nist.gov/vuln/detail/CVE-2023-34455","https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea","https://github.com/xerial/snappy-java","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/SnappyInputStream.java#L388","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/SnappyInputStream.java","https://security.netapp.com/advisory/ntap-20230818-0009"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qcwq-55hx-v3vh","url":"https://osv.dev/vulnerability/GHSA-qcwq-55hx-v3vh"}],"summary":"snappy-java's unchecked chunk length leads to DoS"}